Welcome Guest, Login or Sign up

Zimbra Gallery

zimbraSambaPassword Extension

by amessina

Updated for 7.x! Pure Java now!

Server extension to compute the samba NT and LM hashes and keep them in sync with the Zimbra user password when it is changed.



  • ZCS up to 7.2
  • Working Samba 3.x + LDAP
  • zimbra_posixaccount and zimbra_samba admin extension installed


Installation and Configuration

  1. As root, create the /opt/zimbra/lib/ext/sambapassword directory
  2. As root, copy zimbraSambaPassword.jar into /opt/zimbra/lib/ext/sambapassword/
  3. Restart Zimbra

At the end execute as zimbra user:

zmprov md example.com zimbraPasswordChangeListener SambaPassword


Note: Follow the links below to download working copies for ZCS 7.2 of the famous admin extensions zimbra_posixaccount and zimbra_samba

Useful Links

Downloads: 3,764
Latest Version: 1.0
Categories: Utilities
Compatibility: ZCS 5.0 or later, ZCS 7.0 or later
License: AL
Created: March 10, 2008
Updated: November 18, 2012


by tim.mothery on Sep 07, 2010 for version 0.1

I'm moving my whole company (approx 350 windows clients) over to LDAP and Samba and couldn't find a clean way to change the NT password.  As we use Zimbra (since early v4) this is the perfect way to do it.  Users now have a 'web' interface to change (all) their password for both Samba and Zimbra.  All other solutions presume that your running Samba as a domain controller which we don't and don't want to. 


P.S.  The ReadMe mentions avioding the mkntpwd in favour of a pure Java implementation.  Maybe this python code snippet will help

>>> import hashlib>>> nt_password = hashlib.new('md4', 'test'.encode('utf-16le')).hexdigest()>>> nt_password'0cb6948805f797bf2a82807973b89537'


Hi Tim

Yes, I agree with you: it's not a pure java implementation.
It simply was a (maybe better?) follow-up of my previous post on Zimbra Forums.
If anyone is interested I can recode it in a pure java way.

Thank you

by amessina on March 27, 2011

by mnbvmnbv on Mar 14, 2011 for version 0.1



When I install the zimbraSambaPassword extension, how can I specify the url of my external active directory to synchronized the passwords??



Thanks, excellent zimlet :D


There's no needs to do it in the zimlet.
You have to enter your external AD server as usually in Zimbra. That's all.

Thanks a lot.

by amessina on March 27, 2011

by nyu on Sep 20, 2011 for version 0.1


I installed it, but when change password on webUI I have an eror Invalid attribute name.

I using Zimbra OpenSource 7.1.2_GA


Thanks, zimlet

Hy nyu,
it was developed for zcs 5.x.

I'll start coding and tests for 7.x soon


by amessina on March 19, 2012

by mbayram on Apr 09, 2012 for version 0.1

Amessina, is there any development for 7.x?



by marcelofr on May 08, 2012 for version 0.1

Hello amessina, I've installed your extension on 7.1.4 and I broke authentication successfully... I'm reversing manual README instructions, but I don't know how to reverse "zmprov modifyConfig zimbraPasswordChangeListener sambapassword".

I hope you can code the new version soon!!!

Add a Review

Please log in to post review/comments.

Older Versions

Version 0.1

Compatibility: ZCS 5.0
Created: April 07, 2010
  More details…